Resubmissions

23/02/2024, 12:07

240223-paf56aga48 10

23/02/2024, 10:54

240223-mzvczafa4t 10

General

  • Target

    2024-02-23_99c8f1043e9543cfe9ec9d43b889a3f5_gandcrab

  • Size

    97KB

  • MD5

    99c8f1043e9543cfe9ec9d43b889a3f5

  • SHA1

    c9e05c506808204564969a18745542061a9a71ae

  • SHA256

    22f767e8ad21dc0375322ff71f4e0d7a434cb9a05d4ce080ff7e5cb1949c0fde

  • SHA512

    3d10c1590644d804cd9aa0b49065585317eff82a9eda6d6f0c4cae6feb1024a2a264935c45ddbfef5022477ff279f259e978fc300618995e97b544e9a0b54af0

  • SSDEEP

    1536:IZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:GBounVyFHFMqqDL2/LgHkc2

Score
10/10

Malware Config

Signatures

  • GandCrab payload 1 IoCs
  • Gandcrab family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-23_99c8f1043e9543cfe9ec9d43b889a3f5_gandcrab
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections